NVD

Id
45373  
Name
CVE-2012-3834  
Description
SQL injection vulnerability in forensics/base_qry_main.php in AlienVault Open Source Security Information Management (OSSIM) 3.1 allows remote authenticated users to execute arbitrary SQL commands via the time[0][0] parameter.  
Reject
 
CVSS Version
2  
CVSS Score
6.5  
Severity
Medium  
CVSS Base Score
6.5  
CVSS Impact Subscore
6.4  
CVSS Exploit Subscore
8  
CVSS Vector
(AV:N/AC:L/Au:S/C:P/I:P/A:P)  
Pub Date
2017-01-19  
Published
2012-07-03  
Modified Date
2012-08-24  
Seq
2012-3834  

Actions

Related NVD References

Id NVD Id NVD No. Reference Actions
227805 45373 CVE-2012-3834 http://www.darksecurity.de/index.php?/211-KORAMIS-ADV2012-002-Alienvault-OSSIM-Open-Source-SIEM-3.1-Multiple-security-vulnerabilities.html  View
227806 45373 CVE-2012-3834 18800  View
227807 45373 CVE-2012-3834 http://www.koramis.com/advisories/2012/KORAMIS-ADV2012-002.txt  View
227808 45373 CVE-2012-3834 53331  View
227809 45373 CVE-2012-3834 alienvault-baseqrymain-sql-injection(75290)  View

Related JVN

Id Name Title Summary Cveinfo Name Cveinfo Id Nvdinfo Name Nvdinfo Id Cvssv2 Cvssv3 Jvnurl Published Date Last Updated Date Actions
27287 JVNDB-2012-002994 AlienVault の OSSIM における SQL インジェクションの脆弱性 AlienVault Open Source Security Information Management (OSSIM) の forensics/base_qry_main.php には、SQL インジェクションの脆弱性が存在します。 CVE-2012-3834 57072 CVE-2012-3834 45373 6.5 http://jvndb.jvn.jp/ja/contents/2012/JVNDB-2012-002994.html 2012-07-03 2012-07-05 View